Q: 5
Refer to the exhibit: 
Options
Discussion
Probably D, because strict uRPF drops anything not following the exact expected return path. A is a common distractor here.
D imo, strict mode uRPF checks if the incoming packet's source is reachable via the same interface-if not, it gets dropped. Helps with DDoS and spoofed packets. Makes sense for what the question is asking.
C/D? Is the requirement specifically about blocking spoofed traffic only, or is the focus on route symmetry? That might flip which is correct here.
Be respectful. No spam.